This project aims to take seriously the fact that the development and deployment of AI systems is not above the law, as decided in constitutional democracies. This feeds into the task of addressing the question of incorporation of fundamental rights protection into the architecture of AI systems including (1) checks and balances of the Rule of Law and (2) requirements imposed by positive law that elaborates fundamental rights protection.

A key result of this task will be a report on a coherent set of design principles firmly grounded in relevant positive law, with a clear emphasis on European law (both EU and Council of Europe). To help developers understand the core tenets of the EU legal framework, we have developed two tutorials, one in 2020 on Legal Protection by Design in relation to EU data protection law [hyperlink to Tutorial 2020] and one in 2021 on the European Commission’s proposal of an EU AI Act [hyperlink to Tutorial 2021]. In the Fall of 2022 we will follow up with a Tutorial on the proposed EU AI Liability Directive.

Our findings will entail: - A sufficiently detailed overview of legally relevant roles, such as end-users, targeted persons, software developers, hardware manufacturers, those who put AI applications on the market, platforms that integrate service provision both vertical and horizontal, providers of infrastructure (telecom providers, cloud providers, providers of cyber-physical infrastructure, smart grid providers, etc.);

A sufficiently detailed legal vocabulary, explained at the level of AI applications, such as legal subjects, legal objects, legal rights and obligations, private law liability, fundamental rights protection; - High level principles that anchor the Rule of Law: transparency (e.g. explainability, preregistration of research design), accountability (e.g. clear attribution of tort liability, fines by relevant supervisors, criminal law liability), contestability (e.g. the repertoire of legal remedies, adversarial structure of legal procedure).

Lecture series for Tutorial 2021 AI Act
Lecture series for Tutorial 2021 AI Act

 

This tutorial explains, in the form of slides with audio, the proposal for an EU AI Act, as proposed by the European Commission in the Spring of 2021. It does not discuss the subsequently proposed amendments.

Key issues discussed are: (1) the overall architecture of the AI, (2) the pragmatic approach to the definition of AI systems (which is not about ‘AI’ but about ‘AI systems’), (3) the different roles, notably that of the providers of these systems, (4) the emphasis on high risk AI systems and (5) the details of the requirement that must be met by all high risk systems. It also explain what AI practices are prohibited and what transparency requirements must be met by a small set of AI systems.

Lectures series for Tutorial 2020 Legal Protection by Design
Lectures series for Tutorial 2020 Legal Protection by Design

Organizers

Event Contact

Programme

Time Speaker Description
14.00 - 16.00 Mireille Hildebrandt Tutorial on the proposal for an AI Act

Background

All partners need to prepare for the tutorial, made easy by a small library of presentations that

- discuss the most important players, concepts, structure and obligations in the proposal

The presentations consist of slides with audio, explaining the text.

The library can be found at the internal service of the HAI network

During the session Hildebrandt will present a general introduction to the proposal, highlighting its architecture, links and deeplinks with the existing framework (product safety) and the upcoming framework (Digital Market Act, Digital Services Act, Data Governance Act). This introduction will form slide-set 0, which will be added to the library after the event.

TUTORIAL Library:

A series of Slide-sets with Audio:

    1. AIA General provisions, definitions and prohibitions
      Title I – art. 1-4, Annex I and Title II – art. 5
    2. AIA What are high-risk AI systems?
      Title III, chapter 1 – art. 6-7, Annex II and III
    3. AIA Risk management system for high risk systems
      Title III, chapter 2 – art. 9
    4. AIA Data and data governance of high risk systemsWhat information must be provided to whom and how?
      Title III, chapter 2 – art. 10
    5. AIA Transparency of high risk systems
      Title III, chapter 2 – art. 13
    6. AIA Human oversight of high risk systems
      Title III, chapter 2 – art. 14
    7. AIA Accuracy, robustness and cybersecurity of high risk systems
      Title III, chapter 2 – art. 15
    8. AIA Obligations of providers of high risk systems
      Title III, chapter 3 – art. 16-23
    9. AIA Obligations for users of high risk systems
      Title III, chapter 3 – art. 29
    10. AIA Notification, conformity assessment of high risk systems
      Title III, chapter 5 – art. 42-44 and 48-49
    11. AIA Transparency for medium risk systems
      Title IV – art. 52
    12. AIA Remaining issues

Organizers

Event Contact

Programme

Time Speaker Description
12.00 - 13.30 Mireille Hildebrandt

Background

This is an internal event, where all partners need to prepare themselves, based a small library of presentations that:

      1. introduce the tutorial and
      2. provide a small set of concepts (and legal norms) core to the GDPR. The presentations consist of slides with audio, explaining the text. The library can be found at the internal webserver of the HAI-NET

The library also provides access to the Textbook Law for Computer Scientists and Other Folk that contains relevant literature, notably in chapters 5 and 10.

TUTORIAL Library:

 The Open Access Textbook:

      • Law for Computer Scientists and Other Folk (OUP 2020, available in Open Access)
      • See dedicated sections below

A series of Slide-sets with Audio:

      • A 45-minute slide-set with audio: Main Introduction to the Tutorial
        Check out the introduction, the glossary and study chapter 5 of the Textbook
      • A set of eight short slide-sets with audio that introduce
        core GDPR requirements
        1. What is the legal status of developers, users and end-users?
          Controllers and processors (art. 4 GDPR)
          Section 5.5.2.3 and 5.5.2.4 of the Textbook
        2. On what ground can you process personal data?
          Legal basis (art. 6 GDPR)
          Section 5.2.5 of the Textbook
        3. What rules inform lawful development and use of data-driven AI?
          Principles (art. 5 GDPR)
          Section 5.2.6 of the Textbook
        4. What counts as valid consent?
          Consent (art. 7 GDPR)
          Section 5.2.7 of the Textbook
        5. What information must be provided to whom and how?
          Transparency (art. 12-15 GDPR)
          Section 5.4.1 GDPR of the Textbook (though at generic level)
        6. What kind of automated decisions are prohibited by default?
          Automated decisions (art. 22 GDPR)
          Section 3.3.3 of the Textbook (in relation to e.g. DLTs)
        7. How to embed legal norms in systems, architectures and applications?
          Data protection by design and default (DPbDD) (art. 25 GDPR)
          Section 5.2.9 and 10.3.3.2 of the Textbook
        8. When and how to assess the impact of data-driven AI applications?
          Data protection impact assessment (DPIA) (art. 35 GDPR)
          Section 5.2.10 and 10.3.3.1 of the Textbook

Organizers

Event Contact

Programme

Time Speaker Description
14:00 - 14:10 Roberto Trasarti SoBigData++ project: an ecosystem for Ethical Social Mining - This talk introduces SoBigData++ project with the aim of putting in context the participants presenting the main objectives of the project and the consortium of experts involved working on the vertical contextes: Societal Debates and Online Misinformation, Sustainable Cities for Citizens, Demography, Economics & Finance 2.0, Migration Studies, Sports Data Science, Social Impact of Artificial Intelligence and Explainable Machine Learning. Part of this presentation will be the description of an ethical approach to data science which is a pillar of the SoBigData++ project.
14:10 - 14:25 Valerio Grossi SoBigData RI Services - An overview of the SoBigData RI services will be shown including the Exploratories (Vertical research contexts), the resource catalogue, the training area and SoBigData Lab.
14:25 - 14:55 Giulio Rossetti Hands-on JupyterHub service and SoBigData Libraries - This first hands-on session focuses on the libraries and methods developed within the SoBigData consortium. Code examples and case studies will be introduced by leveraging a customized JupyterHub notebook service hosted by SoBigData. Using such a freely accessible coding environment, we will discuss a subset of the functionalities available to SoBigData users to design and run their experiments.
14:55 - 15:10 Massimiliano Assante Hands-on computational engine & technologies - In this second hands-on session, the tutorial will focus on the computational engine provided by SoBigData. Real examples will be presented in order to highlight the functionalities to deploy an algorithm and run it on the cloud.
15:10 - 15:25 Giovanni Comandè Legality Attentive data Science: it is needed and it is possible!
15:25 - 15:35 Francesca Pratesi FAIR: an E-learning module for GDPR compliance and ethical aspects
15:35 - 16:00 Beatrice Rapisarda (moderator) An open discussion to give more details on specific aspects according to the requests of the audience (not already addressed during the tutorial or presentations).

Objectives

The objectives of the tutorial are to show how SoBigData RI can support data scientists in doing cutting-edge science and experiments. In this perspective, our target audience also includes people interested in big data analytics, computational social science, digital humanities, city planners, wellbeing, migration, sport, health within the legal/ethical framework for responsible data science and artificial intelligence applications. With its tools and services, SoBigData RI promotes the possibilities that new generations of researchers have for executing large-scale experiments on the cloud making them accessible and transparent to a community. Moreover, specialized libraries developed in SoBigData++ project will be freely accessible in order to make cutting edge science in a cross-field environment.

Format: The tutorial will be 3 hours containing:

  • 1 hour of presentations describing the European project SoBigData++, the RI Services, and the Responsible Data Science principles and tools;
  • 45 minutes and half of practical use of the RI with real examples of analysis in a dedicated Virtual research environment;
  • 20 minutes for an open discussion with the attendees on the various aspects presented.